Clarify event definition - add metrics

CHANGELOG.md

@@ -26,6 +26,7 @@ All notable changes to this project will be documented in this file based on the
 ### Improvements
 * Improved the definition of the file fields #196
 * Improved the definition of the agent fields #192
+* Improve definition of events, logs, and metrics in event section #194
 
 ### Deprecated
 

README.md

@@ -188,7 +188,7 @@ These fields can represent errors of any kind. Use them for errors that happen w
 
 ## <a name="event"></a> Event fields
 
-The event fields are used for context information about the data itself.
+The event fields are used for context information about the log or metric event itself. A log is defined as an event containing details of something that happened. Log events must include the time at which the thing happened. Examples of log events include a process starting on a host, a network packet being sent from a source to a destination, or a network connection between a client and a server being initiated or closed. A metric is defined as an event containing one or more numerical or categorical measurements and the time at which the measurement was taken. Examples of metric events include memory pressure measured on a host, or vulnerabilities measured on a scanned host.
 
 
 | Field  | Description  | Level  | Type  | Example  |

fields.yml

@@ -370,7 +370,7 @@
       title: Event
       group: 2
       description: >
-        The event fields are used for context information about the data itself.
+        The event fields are used for context information about the log or metric event itself. A log is defined as an event containing details of something that happened. Log events must include the time at which the thing happened. Examples of log events include a process starting on a host, a network packet being sent from a source to a destination, or a network connection between a client and a server being initiated or closed. A metric is defined as an event containing one or more numerical or categorical measurements and the time at which the measurement was taken. Examples of metric events include memory pressure measured on a host, or vulnerabilities measured on a scanned host.
       type: group
       fields:
 

schemas/event.yml

@@ -3,7 +3,7 @@
   title: Event
   group: 2
   description: >
-    The event fields are used for context information about the data itself.
+    The event fields are used for context information about the log or metric event itself. A log is defined as an event containing details of something that happened. Log events must include the time at which the thing happened. Examples of log events include a process starting on a host, a network packet being sent from a source to a destination, or a network connection between a client and a server being initiated or closed. A metric is defined as an event containing one or more numerical or categorical measurements and the time at which the measurement was taken. Examples of metric events include memory pressure measured on a host, or vulnerabilities measured on a scanned host.
   type: group
   fields: